JOINT CONTROLLERS OF THE PROCESSING |
---|
LONDON ESTATE SIX LDA, with headquarters in Costa Rica, Santa Rosa de Pocosol, San Carlos e-mail: info@costaricaheaven.com (hereinafter: “Joint Controllers “). |
1 – PURPOSE OF THE PROCESSING |
---|
1.1 – Contractual purpose: view the web pages and use the services offered within the sites: https://costaricaheaven.com |
1.2 – Marketing purposes: sending – with automated contact methods (such as sms, mms and e-mail) and traditional methods (such as telephone calls with an operator) – of promotional and commercial communications relating to services /products offered by the Joint Controllers or reporting of corporate events or participation in webinars, as well as carrying out market studies and statistical analyses. |
1.3 – Third party marketing purposes (with data communication): sending – with automated contact methods (such as sms, mms and e-mail) and traditional methods (such as telephone calls with an operator) – of promotional and commercial communications, advertising material relating to offers of services/products, reporting of company events, as well as carrying out market studies and statistical analyzes by third parties with respect to the Joint Controllers, to whom the data are communicated. |
1.4 – Marketing purposes by the Joint Controllers in favor of third parties (without communication of data): sending – with automated contact methods (such as sms, mms and e-mail) and traditional ( such as telephone calls with an operator) – of promotional and commercial communications, advertising material relating to offers of services/products, reporting of company events, as well as carrying out market studies and statistical analyzes by the Joint Controllers on behalf of third parties. |
1.5 – Profiling purposes: analysis of your preferences, habits, behaviors, interests inferred, for example, from online clicks on articles/sections of the websites of the FastBooking Group Network, in order to send you personalized commercial communications/carry out targeted promotional actions, business intelligence. The processing of your personal data for profiling purposes will take place, in case of consent, with data processing tools which, following cross-referencing, will create your commercial and behavioral profile on the web. This data processing tool relates the data collected during your browsing on the Sites through the use of first-party profiling cookies accepted by you with the data collected through your registration on the FastBooking Group Network. Furthermore, such data and/or information will be associated with any and/or further data and/or information already in our possession following your subscription to our services. |
1.6 – Legal obligations: fulfill obligations established by regulations and applicable national and supranational legislation. |
1.7 – Sending newsletters: if requested by you with registration for this service. |
1.8 – Rights of the Joint Controllers: if necessary, to ascertain, exercise or defend the rights of the Joint Controllers in court. |
1.10 – Operation of the Sites: the IT systems and software procedures used to operate the Sites acquire, during their normal operation, some personal data whose transmission is implicit in the use of the protocols of Internet communication. This is information that is not collected to be associated with identified interested parties, but which, by its very nature, could, through processing and association with data held by the Joint Controllers or third parties, allow users of the Sites to be identified. |
2 – LEGAL BASES OF PROCESSING |
---|
2.1 – Contractual purpose: execution of a contract of which you are a party. |
2.2 – Marketing and profiling purposes: consent (optional and revocable at any time). |
2.3 – Legal obligations: need to fulfill legal obligations. |
2.4 – Sending newsletters: execution of a contract of which you are a party, i.e. subscribing to the newsletter. |
2.5 – Rights of the owner: legitimate interest. |
3 – PERIOD OF CONSERVATION OF PERSONAL DATA |
---|
3.1 – Contractual purpose, legal obligations and sending of newsletters: for the entire contractual duration and, after termination, for 10 years. |
3.2 – Marketing and profiling purposes: until consent for this purpose is revoked. |
3.3 – Rights of the owner: in the case of judicial litigation, for the entire duration of the same, until the deadlines for appeals have been exhausted. |
3.4 – Operation of the Sites: for the entire duration of the browsing session on the Sites. |
After the retention terms indicated above have expired, your personal data will be destroyed, deleted or made anonymous, compatibly with the technical cancellation and backup procedures. |
4.1 – PERSONAL DATA PROCESSED FOR CONTRACTUAL PURPOSES – LEGAL OBLIGATIONS – RIGHTS OF THE DATA CONTROLLER – CREDIT COLLECTION |
---|
Personal data, contact data, administrative-accounting data. |
4.2 – PERSONAL DATA PROCESSED FOR MARKETING AND PROFILING PURPOSES |
Personal data, contact data, administrative-accounting data, data collected by cookies installed by the Sites. |
4.3 – PERSONAL DATA PROCESSED FOR NEWSLETTER SENDING |
Contact details. |
4.4 – PERSONAL DATA PROCESSED FOR THE OPERATION OF THE SITES |
The IP addresses or domain names of the computers used by users who connect to the Sites, the addresses in URI (Uniform Resource Identifier) notation of the requested resources, the time of the request, the method used to submit the request to the server , the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.), other parameters relating to the operating system and the user’s IT environment, information relating to behavior of the user on the Sites, to the pages that have been visited or searched for, in order to select and make specific announcements to the user of the Sites and data relating to browsing behavior on the Sites using, for example, cookies. td> |
5 – MANDATORY PROVISION OF DATA |
---|
The provision of personal data referred to in point 4.1 for the purposes referred to in point 1.1 is mandatory. The refusal to provide the aforementioned personal data therefore does not allow the possibility of using the services/contents offered by the Sites. The provision of personal data referred to in point 4.2 for the purposes referred to in points 1.2, 1.3, 1.4 and 1.5 is optional and subject to your consent. Some personal data referred to in point 4.4 are strictly necessary for the functioning of the Sites, others are used for the sole purpose of obtaining anonymous statistical information on the use of the Sites and to check their correct functioning, and are deleted immediately after processing. When processing personal data that can, directly or indirectly, identify you, we try to respect a principle of strict necessity. For this reason, we have configured the Sites in such a way that the use of personal data is reduced to a minimum and in order to limit the processing of personal data that allows you to be identified only in case of necessity or at the request of the authorities and law enforcement agencies. police (such as, for example, data relating to traffic and your stay on the Sites or your IP address) or to ascertain responsibility in the event of hypothetical computer crimes against the Sites. |
6 – RECIPIENTS OF THE DATA |
---|
data may be processed by external parties acting as data controllers such as, by way of example, supervisory and control authorities and bodies and in general public or private entities entitled to request the data, as well as persons, companies, associations or professional firms that provide assistance and consultancy activities. The data may also be processed, on behalf of the Joint Controllers, by external parties designated as data controllers pursuant to art. 28 of the GDPR, who are given adequate operational instructions. These subjects are essentially included in the following categories:
Your data may be processed, in the event of your explicit consent, by third parties to whom the data are communicated. The personal data will not be disclosed, but may possibly be transmitted to the Public Authorities who expressly request it to the Joint Data Controllers for administrative or institutional purposes, in accordance with the provisions of current national and European legislation. |
7 – SUBJECTS AUTHORIZED TO PROCESSING |
---|
Your data may be processed by employees of the company functions of the Joint Controllers responsible for pursuing the purposes indicated above, who have been expressly authorized to process and who have received adequate operating instructions. The data referred to in point 4.4 collected while browsing the Sites will be processed by employees, collaborators of the Joint Controllers or external parties, as data processors and data controllers, who carry out tasks of a technical and organizational nature of the Sites on behalf of the Joint Controllers. complete and updated list of data processors appointed by the Company can be obtained by writing via e-mail to privacy@numero6.org |
8 – YOUR RIGHTS AS AN INTERESTED PARTY IN THE PROCESSING – COMPLAINT TO THE SUPERVISORY AUTHORITY |
---|
By contacting the Joint Controllers via e-mail at privacy@numero6.org , you may ask the Joint Controllers for access to the data concerning you, their cancellation, the rectification of inaccurate data, the integration of incomplete data, the limitation of processing in the cases provided for by the art. 18 GDPR. |
Furthermore, in the event that the processing is based on consent or on a contract and is carried out with automated tools, you may request the portability of your data and to receive the data in a structured, commonly used and machine-readable format. data themselves, as well as, if technically feasible, to transmit them to another owner without impediments. |
You have the right to revoke the consent given at any time for marketing and/or profiling purposes, as well as to oppose the processing, for reasons connected to your particular situation, of the data in the event of the exercise of a public interest or legitimate interest of the owner as well as for marketing purposes, including profiling connected to direct marketing. The possibility remains for you, if you prefer to be contacted for the aforementioned purpose exclusively through traditional methods, to express your opposition only to the receipt of communications through automated methods. The Joint Data Controllers abstain from processing, except for legitimate reasons that prevail over the interests, rights and freedoms of the interested party, or for the establishment, exercise or defense of a right in court. |
You have the right to lodge a complaint with the competent Supervisory Authority in the Member State in which you habitually reside or work or in the State in which the alleged infringement occurred. |
9 – DATA SECURITY |
---|
Your personal data will be processed with automated tools for the time strictly necessary to achieve the purposes for which they were collected and in compliance with the principle of necessity and proportionality, avoiding processing personal data if the operations can be carried out through use of anonymous data or through other methods. We have adopted specific security measures to prevent the loss of personal data, illicit or incorrect use and unauthorized access but please do not forget that it is essential for the security of your data that your device is equipped with tools such as constantly updated antivirus and that the provider that provides the Internet connection guarantees the secure transmission of data through firewalls, anti-spamming filters and similar safeguards. |
10 – SHARING OF CONTENTS VIA SOCIAL NETWORKS |
---|
If you decide to share some content via one or more social networks (Facebook, Twitter, Google+, Pinterest, Linkedin) the Sites may access some information from your account if you have activated the sharing of data from your account with applications third parts. You can disable the sharing of your account data with third-party applications by accessing your account settings. For further information, we invite you to consult the website of the social network(s) to which you are registered (www.facebook.com, www.twitter.com., www.google.com, www.pinterest.com, www.linkedin.com ). |